Posts

Showing posts from July, 2019

IOT is even more of a risk than you thought

Image
IOT is even more of a risk than you thought
GRIMM purchased a GeoVision camera that arrived off-the-shelf with security vulnerabilities like most consumer IOT devices. The camera is a stand-in for any IOT device in a residential, industrial, or enterprise environment. The team demonstrated through a practical hands-on-exercise at HackNYCRSAHack the Capitol, and multiple BSides where participants learn how to use a publically available exploit to compromise an emulated home network. The team modeled the design and configuration of the hands-on-exercise from a traditional use case: A router with a forwarded network portA publicly accessible IOT cameraA Windows computer that stored a treasure trove of valued, personal data Though the traditional use case may well be known as a textbook style situation, newer products offered by IOT vendors such as Nest and Ring leverage cloud-based services to simplify the technical burdens that an end-user may endure when configuring an IOT device. F…